Senior Governance, Risk & Compliance Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Manage security, privacy, and compliance programs at OnePlan, ensuring audit readiness and certification compliance. Collaborate across teams to implement security controls in a Microsoft based SaaS environment.
Responsibilities:
- Own and manage OnePlan’s governance, risk, and compliance program across security and privacy frameworks
- Maintain the company’s compliance certifications including SOC 2 Type II, ISO 27001, and ISO 27701, ensuring ongoing audit readiness and successful surveillance audits and recertifications
- Coordinate with external auditors and manage evidence collection, control validation, and supporting documentation
- Maintain and update security policies, procedures, and internal documentation supporting compliance frameworks
- Maintain the company risk register and drive risk identification, assessment, and remediation activities across the organization
- Partner closely with Engineering and IT teams to implement and document security controls across the platform
- Lead OnePlan’s FedRAMP Moderate readiness initiative, including NIST 800-53 gap assessments and remediation planning
- Develop and maintain the System Security Plan (SSP) and associated FedRAMP documentation
- Prepare the organization for 3PAO assessment and establish processes for ongoing continuous monitoring
- Manage vendor risk assessments and third party security reviews
- Support enterprise and public sector security questionnaires, compliance reviews, and due diligence requests
- Ensure privacy and data protection practices align with GDPR and global privacy frameworks
- Support the ongoing operation of OnePlan’s ISO 27701 privacy program
Requirements:
- 6+ years of experience in governance, risk and compliance, information security, or security compliance roles
- Direct experience managing SOC 2 Type II and ISO 27001 audits and maintaining ongoing compliance programs
- Strong understanding of NIST 800-53 and FedRAMP security requirements
- Experience using compliance automation platforms such as Vanta or similar tools
- Experience working in a cloud native SaaS environment, ideally within Azure
- Strong documentation, audit management, and cross functional coordination skills
- Ability to translate security and compliance requirements into practical operational processes
- Experience leading or supporting FedRAMP readiness or authorization programs
- Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Auditor, or CIPP
- Experience supporting enterprise security reviews and government compliance requirements
- Experience working in high growth SaaS or enterprise software companies
Benefits:
- We’re a remote-first company with team members across the USA, Canada, UK, and India!
- OnePlan has been recognized as the Global Microsoft Partner of the Year in Project Portfolio Management in 2019, 2020, 2021, 2022 and 2023.
- We’ve been named a "Strong Performer" in the latest Forrester Strategic Portfolio Management WAVE report.
- We offer comprehensive health, dental, and vision benefits, with additional insurance options.
- Employer RRSP and 401K matching programs.
- A fun, collaborative, and diverse environment with regular health and team challenges to keep things light and enjoyable!
Similar Jobs
Global Regulatory Lead, PDx
Global Regulatory Lead overseeing pharmaceutical diagnostics from pre-clinical to registration in global markets. Leading regulatory strategy for new product introductions and compliance obligations.
Manager, Regulatory Compliance
Manager of Regulatory Compliance leading U.S. sportsbook trading operations at DraftKings. Ensuring compliance across jurisdictions and managing a team in a fast-paced environment.
Risk and Compliance Manager – Retail Broking
Risk and Compliance Manager supporting compliance obligations for retail broking businesses in the UK. Providing regulatory guidance while working closely with the Risk & Compliance team remotely.
Regulatory Lead – Mount Nansen Remediation
Regulatory Lead overseeing environmental assessments and permitting for Mount Nansen Remediation project. Leading collaboration between technical teams and regulatory bodies.
Regulatory Affairs Associate
Regulatory Affairs Associate for Parexel developing and publishing regulatory submissions to health authorities. Collaborating with stakeholders to ensure compliance and quality in documentation.
IT Compliance Specialist, SISP
IT Compliance Specialist advancing IT Compliance program at Sedgwick. Conducting risk assessments, collaborating with stakeholders, and ensuring regulatory compliance.
Associate Director – Global Compliance Platform
Associate Director overseeing Amgen's global compliance platform (C3) for healthcare compliance requirements. Leading strategy, governance, and operations to optimize compliance processes globally.
Trade Compliance Specialist
Trade Compliance Specialist reviewing and ensuring compliance of export orders and documentation for corporate clients. Collaborating with partners to maintain regulatory standards and documentation accuracy.
Medicare Compliance, Advertising Filing Specialist
Medicare Compliance & Advertising Filing Specialist managing all Medicare advertising submissions through HPMS. Ensuring compliance with CMS guidelines and managing material submissions across multiple carriers.
Senior Director – Contracts Compliance & Operations
Senior Director overseeing the contract compliance program and operational functions at Amentum. Lead initiatives to enhance efficiency and ensure adherence to government regulations.
Senior Director, Global Trade Compliance
Senior Director leading global trade compliance programs and teams at Beckman Coulter Diagnostics. Driving strategy and operational efficiency in a dynamic global business environment with compliance expertise.
Senior Compliance Officer
Senior Compliance Officer overseeing financial services compliance at Acorns. Leading regulatory strategies and ensuring adherence to regulations for a financial wellness platform.
Credentialing & Compliance Lead
Credentialing & Compliance Lead responsible for the Medicare DMEPOS credentialing lifecycle and compliance activities. Facilitating customer interactions and maintaining regulatory standards within a fast-growing startup.
BESS Product Compliance Engineer
Software Solutions Engineer focusing on deploying VaultOS Power Plant Controller in Australia. Collaborating with global teams to develop utility-scale energy storage systems.
Data Protection, Compliance & Transformation Specialist
Referent für Datenschutz, Compliance und Transformation bei Linimed Gruppe GmbH. Verantwortung für operative Umsetzung und Weiterentwicklung der Prozesse im digitalen Bereich.
Business License Compliance Manager
Business License Compliance Manager at Apex Companies ensuring compliance with business licensing across jurisdictions. Overseeing licensing processes, renewals, and regulatory requirements with internal stakeholders.
Manager, Insurance Compliance
Manager, Insurance Compliance responsible for insurance compliance with GSE and HUD lenders. Utilizing a compliance automation platform for efficient portfolio management and strategic client support.
Insurance Compliance Analyst
Analyst handling insurance compliance operations within technology-driven environment supporting GSE and HUD lender portfolios. Collaborating with senior team members for high-quality delivery and improvement.
Compliance Analyst, Research Compliance
Compliance Analyst coordinating export control compliance operations at City of Hope. Ensuring adherence to federal international compliance laws and regulations in the research sector.
Senior Compliance Analyst, Research Compliance
Senior Compliance Analyst at City of Hope ensuring compliance in research activities and regulatory standards. Conducting audits, documenting findings, and assisting in investigations of non-compliance issues.